CVE-2016-2176

creationtimestamp| type| source ---|---|--- 2026-08-22 14:00:20+00:00| seen| https://t.me/informationsec/987 2026-08-23 00:00:35+00:00| seen| https://t.me/informationsec/987...

CVE-2016-1549

creationtimestamp| type| source ---|---|--- 2026-08-22 14:00:20+00:00| seen| https://t.me/informationsec/975 2026-08-23 00:00:33+00:00| exploited| https://t.me/informationsec/975...

CVE-2016-1399

creationtimestamp| type| source ---|---|--- 2026-08-22 14:00:19+00:00| seen| https://t.me/informationsec/1130 2026-08-23 00:00:35+00:00| seen| https://t.me/informationsec/1130...

CVE-2016-5135

creationtimestamp| type| source ---|---|--- 2026-08-22 14:00:19+00:00| seen| https://t.me/informationsec/1198 2026-08-23 00:00:35+00:00| seen| https://t.me/informationsec/1198...

CISCO-SA-20161102-CMS

creationtimestamp| type| source ---|---|--- 2026-08-22 14:00:17+00:00| seen| https://t.me/informationsec/1437 2026-08-23 00:00:36+00:00| seen| https://t.me/informationsec/1437...

CLSA-2026-1787403789 TuxCare security update for org.springframework.data:spring-data-commons (4 CVEs)

TuxCare rebuilt org.springframework.data:spring-data-commons to address 4 CVEs. Fixed in 3.3.13-tuxcare.3...

CVE-2026-55622

creationtimestamp| type| source ---|---|--- 2026-08-22 13:00:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtodeo3hjv27...

CVE-2026-4245

creationtimestamp| type| source ---|---|--- 2026-08-22 12:27:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/53ijer5cuvpev...

SonicWall GMS and Analytics Web Services - Shell Injection

The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing authentication bypass. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions id: CVE-2023-34124 info: name: SonicWall GMS and Analytics Web...

Users Ultra <= 3.1.0 - SQL Injection

The Users Ultra WordPress plugin through 3.1.0 fails to properly sanitize and escape the datatarget parameter before it is being interpolated in an SQL statement and then executed via the ratingvote AJAX action available to both unauthenticated and authenticated users, leading to an SQL Injection...

Rukovoditel <= 3.2.1 - Cross Site Scripting

Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting XSS vulnerability in the Add New Field function at /index.php?module=entities/fields&entitiesid=24. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name...

WordPress Plugin Flexible Custom Post Type < 0.1.7 - Cross-Site Scripting

A cross-site scripting vulnerability in edit-post.php in the Flexible Custom Post Type plugin before 0.1.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter. id: CVE-2011-5106 info: name: WordPress Plugin Flexible Custom Post Type 0.1.7 - Cross-Site...

WordPress Integrator 1.32 - Cross-Site Scripting

A cross-site scripting vulnerability in wp-integrator.php in the WordPress Integrator module 1.32 for WordPress allows remote attackers to inject arbitrary web script or HTML via the redirectto parameter to wp-login.php. id: CVE-2012-5913 info: name: WordPress Integrator 1.32 - Cross-Site Scripti...

Atlassian Crowd and Crowd Data Center - Unauthenticated Remote Code Execution

Atlassian Crowd and Crowd Data Center is susceptible to a remote code execution vulnerability because the pdkinstall development plugin is incorrectly enabled in release builds. Attackers who can send unauthenticated or authenticated requests to a Crowd or Crowd Data Center instance can exploit...

Joomla! Component redTWITTER 1.0 - Local File Inclusion

A drectory traversal vulnerability in the redTWITTER comredtwitter component 1.0.x including 1.0b11 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the view parameter to index.php. id: CVE-2010-1983 info: name: Joomla! Component redTWITTER 1.0 - Local File Inclusio...

WordPress MF Gig Calendar <=1.1 - Cross-Site Scripting

WordPress MF Gig Calendar plugin 1.1 and prior contains a reflected cross-site scripting vulnerability. It does not sanitize or escape the id GET parameter before outputting back in the admin dashboard when editing an event. id: CVE-2021-24510 info: name: WordPress MF Gig Calendar =1.2 which...

WordPress RegistrationMagic <5.0.1.6 - Authenticated SQL Injection

WordPress RegistrationMagic plugin before 5.0.1.6 contains an authenticated SQL injection vulnerability. The plugin does not escape user input in its rmchronosajax AJAX action before using it in a SQL statement when duplicating tasks in batches. An attacker can possibly obtain sensitive...

MaxSite CMS > V106 - Cross-Site Scripting

A reflected cross-site scripting vulnerability in MaxSite CMS before V106 via product/page/ allows remote attackers to inject arbitrary web script to a page." id: CVE-2021-35265 info: name: MaxSite CMS V106 - Cross-Site Scripting author: pikpikcu severity: medium description: | A reflected...

VoipMonitor - Pre-Auth SQL Injection

A SQL injection vulnerability in Voipmonitor GUI before v24.96 allows attackers to escalate privileges to the Administrator level. id: CVE-2022-24260 info: name: VoipMonitor - Pre-Auth SQL Injection author: gy741 severity: critical description: A SQL injection vulnerability in Voipmonitor GUI...

WordPress Country Selector <1.6.6 - Cross-Site Scripting

WordPress Country Selector plugin prior to 1.6.6 contains a cross-site scripting vulnerability. The plugin does not sanitize and escape the country and lang parameters before outputting them back in the response. An attacker can inject arbitrary script in the browser of an unsuspecting user in th...